Cyber Threat Trends

Summary: 2025/04/28 23:57

First reported date: 2010/05/28
Inquiry period : 2025/03/29 23:57 ~ 2025/04/28 23:57 (1 months), 117 search results

전 기간대비 30% 높은 트렌드를 보이고 있습니다.
전 기간대비 상승한 Top5 연관 키워드는 CVE Vulnerability Exploit Malware Update 입니다.
공격기술 APT hijack 도 새롭게 확인됩니다.
기관 및 기업 North Korea AhnLab SECUI dprk 도 새롭게 확인됩니다.
기타 MITRE CrushFTP FortiGate Ivanti IoT 등 신규 키워드도 확인됩니다.

The Common Vulnerabilities and Exposures (CVE) system provides a reference method for publicly known information-security vulnerabilities and exposures.

CVE(Common Vulnerabilities and Exposure)는 공개적으로 알려진 소프트웨어의 보안취약점을 가리키는 고유 표기

* 최근 뉴스기사 Top3:
    ㆍ 2025/04/28 NVIDIA Riva Vulnerabilities Leave AI-Powered Speech and Translation Services at Risk
    ㆍ 2025/04/25 DslogdRAT Malware Deployed via Ivanti ICS Zero-Day CVE-2025-0282 in Japan Attacks
    ㆍ 2025/04/25 Commvault Command Center Path Traversal Vulnerability (CVE-2025-34028)

Date range button:

First seen:

Last seen:

Keyword

Trend graph by period

Related keyword cloud

Top 100

#	Trend	Count	Comparison
1	CVE	117	▲ 35 (30%)
2	Vulnerability	116	▲ 34 (29%)
3	Exploit	39	▲ 1 (3%)
4	Malware	33	▲ 7 (21%)
5	Update	33	▲ 6 (18%)
6	RCE	26	▲ 20 (77%)
7	CISA	22	▲ 16 (73%)
8	CVSS	22	▼ -2 (-9%)
9	Alert	19	▲ 7 (37%)
10	Report	18	▲ 6 (33%)
11	Critical	13	▲ 2 (15%)
12	program	13	▲ 12 (92%)
13	Software	12	▲ 2 (17%)
14	attack	12	▼ -8 (-67%)
15	MITRE	11	▲ new
16	Government	10	▲ 9 (90%)
17	Operation	9	▲ 2 (22%)
18	Remote Code Execution	9	▼ -19 (-211%)
19	flaw	8	▲ 5 (63%)
20	Windows	8	▼ -1 (-13%)
21	ZeroDay	8	▼ -6 (-75%)
22	hacking	7	▲ 4 (57%)
23	intelligence	7	▼ -3 (-43%)
24	Remote	7	▲ 3 (43%)
25	securityaffairs	6	▲ 4 (67%)
26	CrushFTP	6	▲ new
27	target	6	▼ -7 (-117%)
28	GitHub	6	▲ 1 (17%)
29	Fortinet	6	▲ 5 (83%)
30	PoC	6	▲ 2 (33%)
31	Microsoft	5	▼ -2 (-40%)
32	Campaign	5	▲ 4 (80%)
33	ThreatProtection	5	▲ 1 (20%)
34	MWNEWS	5	▲ 2 (40%)
35	wild	5	▲ 4 (80%)
36	FortiGate	5	▲ new
37	access	5	- 0 (0%)
38	Cisco	4	- 0 (0%)
39	Ivanti	4	▲ new
40	DDoS	4	▲ 2 (50%)
41	Supply chain	4	▲ 1 (25%)
42	Apache	4	▼ -4 (-100%)
43	NortonLifeLock	4	- 0 (0%)
44	IoT	4	▲ new
45	Java	4	▲ 1 (25%)
46	Funding	4	▲ new
47	SSH	3	▲ new
48	Linux	3	- 0 (0%)
49	Register	3	▲ new
50	code	3	▼ -1 (-33%)
51	NTLM	3	▲ new
52	Exploitation	3	▲ new
53	Google	3	▼ -2 (-67%)
54	WhatsApp	3	▲ new
55	contract	3	▲ new
56	NIST	3	▲ 2 (67%)
57	Command	3	▲ new
58	LinkedIn	3	▲ new
59	CVEs	3	▲ new
60	file	2	▲ new
61	ErlangOTP	2	▲ new
62	North Korea	2	▲ new
63	AhnLab	2	▲ new
64	cti	2	▲ new
65	Old	2	▲ new
66	APT	2	▲ new
67	available	2	▲ new
68	extension	2	▲ new
69	continuity	2	▲ new
70	MITREs	2	▲ new
71	CISAs	2	▲ new
72	SECUI	2	▲ new
73	Allows	2	▲ new
74	dprk	2	▲ new
75	Active	2	▲ 1 (50%)
76	DYEPACK	2	▼ -2 (-100%)
77	Docker	2	▲ new
78	United States	2	- 0 (0%)
79	disclosure	2	▲ new
80	NVIDIA	2	▲ new
81	hijack	2	▲ new
82	Vite	2	▲ new
83	recent	2	▲ new
84	Execution	2	▲ 1 (50%)
85	vulnerable	2	▲ new
86	Telegram	2	▲ new
87	Larva	2	▲ new
88	overflow	2	▲ new
89	randomquery	2	▲ new
90	Gladinet	2	▲ new
91	Education	2	▲ 1 (50%)
92	Password	2	- 0 (0%)
93	httpstcopbHM	2	▲ new
94	SAP	2	▲ new
95	href	2	▲ new
96	SHODAN	2	▼ -1 (-50%)
97	Mandiant	2	▲ 1 (50%)
98	amp	2	- 0 (0%)
99	Secure	2	▲ new
100	unauthenticated	2	▲ 1 (50%)

Special keyword group

Top 5

Malware Type

This is the type of malware that is becoming an issue.

Keyword	Average	Label
DYEPACK		2 (33.3%)
NetWireRC		1 (16.7%)
BlackSuit		1 (16.7%)
DslogdRAT		1 (16.7%)
Vawtrak		1 (16.7%)

Attacker & Actors

The status of the attacker or attack group being issued.

Keyword	Average	Label

Technique

This is an attack technique that is becoming an issue.

Keyword	Average	Label
Exploit		39 (41.5%)
RCE		26 (27.7%)
Remote Code Execution		9 (9.6%)
hacking		7 (7.4%)
Campaign		5 (5.3%)

Country & Company

This is a country or company that is an issue.

Keyword	Average	Label
CISA		22 (33.3%)
Government		10 (15.2%)
Fortinet		6 (9.1%)
Microsoft		5 (7.6%)
Cisco		4 (6.1%)

Threat info

Last 5

SNS

(Total : 75)

Total keyword

CVE Vulnerability Exploit Attacker Update CVSS RCE hacking CISA ZeroDay attack Report Malware Windows Remote Code Execution PoC Fortinet North Korea Telegram WhatsApp hijack dprk APT AhnLab Microsoft SSRF DDoS SECUI Cisco Campaign SHODAN iPhone Password Email ChatGPT Education WordPress ...

No	Title	Date
1	Hunter @HunterMapping ????Alert???? two new vulnerabilities in React Router CVE-2025-43864: DoS via cache poisoning by forcing SPA mode CVE-2025-43865: Pre-render data spoofing on React-Router framework mode ????PoC from @zhero___ & @inzo____ : CVE-2025-43864:https://t.co/hfhSnQ6p8F https://t.co/pTwRxdMNwf	2025.04.28
2	Hunter @HunterMapping ????Alert???? CVE-2025-31324(CVSS v3 score: 10.0):Critical SAP NetWeaver Zero-Day Vulnerability ????EXP : https://t.co/rffC5FzOf3 ????23K+ Services are found on the https://t.co/ysWb28Crld yearly. ????Hunter Link:https://t.co/GaOcRgCFh8 ????Query HUNTER : https://t.co/q9rtuGgxk7="SAP https://t.co/LH	2025.04.27
3	Hunter @HunterMapping ????Alert???? CVE-2025-32432:Craft CMS Allows Remote Code Execution ????EXP : https://t.co/SjQRk5TZLC ????997.9K+ Services are found on the https://t.co/ysWb28Crld yearly. ????Hunter Link:https://t.co/CF2MvxksAI ????Query HUNTER : https://t.co/q9rtuGgxk7="Craft CMS" FOFA https://t.co/GgDFwrqpRx	2025.04.27
4	The Hacker News @TheHackersNews ???? Hackers could be one path away from your sensitive files! ???? New CVEs expose major flaws in Rack & Infodraw systems: ???? CVE-2025-27610 lets attackers read config files & credentials via path traversal. ???? Infodraw CVE-2025-43928 allows any file to be read or deleted—no https://	2025.04.25
5	Cyber_OSINT @Cyber_O51NT Cybersecurity researchers reported three vulnerabilities in Rack::Static, potentially allowing attackers to access files and tamper with logs; CVE-2025-27610 is noted with a CVSS score of 7.5. #Cybersecurity #Ruby #DataBreach https://t.co/acMa17y088	2025.04.25

News

(Total : 42)

Total keyword

Vulnerability CVE Malware Exploit Update RCE CISA Report CVSS Software Attacker Government Operation attack intelligence GitHub target Remote Code Execution Supply chain IoT Windows ZeroDay Linux Campaign NIST Microsoft Java LinkedIn CVEs Fortinet DYEPACK Cisco Commvault United States PoC DDoS Google VPN Red Hat hacking BlackSuit Distribution DslogdRAT Japan NetWireRC Vawtrak WhatsApp Docker DNS Ubuntu NSA Education Qualys Europe ...

No	Title	Date
1	NVIDIA Riva Vulnerabilities Leave AI-Powered Speech and Translation Services at Risk - TrendMicro	2025.04.28
2	DslogdRAT Malware Deployed via Ivanti ICS Zero-Day CVE-2025-0282 in Japan Attacks - The Hacker News	2025.04.25
3	Commvault Command Center Path Traversal Vulnerability (CVE-2025-34028) - FortiGuard Labs	2025.04.25
4	CVE-2025-34028: PoC Released for Critical RCE Vulnerability in Commvault Command Center - Malware.News	2025.04.25
5	159 CVEs Exploited in Q1 2025 — 28.3% Within 24 Hours of Disclosure - The Hacker News	2025.04.24

Additional information

No	Title	Date
1	Employee monitoring app exposes users, leaks 21+ million screenshots - Malware.News	2025.04.28
2	Introducing XSIAM 3.0 - Malware.News	2025.04.28
3	Deploy Bravely with Prisma AIRS - Malware.News	2025.04.28
4	2025 Cyber Resilience Research Discovers Speed of AI Advancing Emerging Attack Types - Malware.News	2025.04.28
5	Intel CEO Targets Change in Corporate Culture to Shape Up - Bloomberg Technology	2025.04.28
View only the last 5

No	Title	Date
1	Commvault Command Center Path Traversal Vulnerability (CVE-2025-34028) - FortiGuard Labs	2025.04.25
2	CVE-2025-34028: PoC Released for Critical RCE Vulnerability in Commvault Command Center - Malware.News	2025.04.25
3	Changes to CVE program are a call to action on your AppSec strategy - Malware.News	2025.04.23
4	Changes to CVE program are a call to action on your AppSec strategy - Malware.News	2025.04.23
5	Changes to CVE program are a call to action on your AppSec strategy - Malware.News	2025.04.23
View only the last 5

No	Request	Hash(md5)	Report No	Date
1	exploit.html CVE MS-MSDT AntiDebug AntiVM PNG Format MSOffice File JPEG Format	f6febdcc05cc9e04e4119c83e1afa2c8	30083	2022.08.02
2	Court Fine.doc Formbook CVE MS-MSDT Word 2007 file format(docx)	730768c4f029608adf0032e95e8e8a1d	29851	2022.07.26
3	wellcome.html Formbook CVE MS-MSDT AntiDebug AntiVM MSOffice File	cdd33ffa502cbffec6e64c4574846a89	29852	2022.07.26
4	exploit.htm CVE MS-MSDT AntiDebug AntiVM MSOffice File	465585177a642d88295d7f0a55b8984c	29868	2022.07.26
5	1.html Formbook CVE MS-MSDT AntiDebug AntiVM MSOffice File	e7bde7d2b74218b4faf98d5f45b86593	29669	2022.07.20
View only the last 5

Level	Description
warning	File has been identified by 29 AntiVirus engines on VirusTotal as malicious
watch	Communicates with host for which no DNS query was performed
watch	Resumed a suspended thread in a remote process potentially indicative of process injection
notice	Allocates read-write-execute memory (usually to unpack itself)
notice	An application raised an exception which may be indicative of an exploit crash
notice	Changes read-write memory protection to read-execute (probably to avoid detection when setting all RWX flags at the same time)
notice	Performs some HTTP requests
notice	Uses Windows utilities for basic Windows functionality
notice	Yara rule detected in process memory
info	One or more processes crashed
Network	ET INFO TLS Handshake Failure
Network	SSLBL: Malicious JA3 SSL-Client Fingerprint detected (Tofsee)

No data

Beta Service, If you select keyword, you can check detailed information.